From nobody Wed Apr 23 05:31:10 2014 Return-Path: X-Original-To: therightkey@ietfa.amsl.com Delivered-To: therightkey@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B07E51A0366 for ; Wed, 23 Apr 2014 05:31:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.651 X-Spam-Level: X-Spam-Status: No, score=-1.651 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FM_FORGED_GMAIL=0.622, RP_MATCHES_RCVD=-0.272, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zDdKVeHRXW4I for ; Wed, 23 Apr 2014 05:31:08 -0700 (PDT) Received: from mail-vc0-x236.google.com (mail-vc0-x236.google.com [IPv6:2607:f8b0:400c:c03::236]) by ietfa.amsl.com (Postfix) with ESMTP id 95B011A01C3 for ; Wed, 23 Apr 2014 05:31:08 -0700 (PDT) Received: by mail-vc0-f182.google.com with SMTP id ib6so1043138vcb.13 for ; Wed, 23 Apr 2014 05:31:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; bh=di0s6LVH71mm7ZdbnXtBsOJo7WRe0TfuMY90lywH9Ok=; b=PSeQDvXETydu9Hw3Y3j3sISh0kIgJ92YK0B+r9ZBko+tYMubollIaZ3jt1Uf4FYR9p bYZxhJsy+rtgoi1Ht81czb0iRqr9A2CPN6PgnLPPqZPil+m74aPVmENGMkFHEtORX+qn Gvprv/C29ZJRIHVZeCEFhKzOQ6S2mqsZHUTg4eBNKJNxFpL3FmIyShhKOMVTTip50+0C 4W2UpISwrZ5Z7LJBY5t+9MiGSiUqA206HQwlNjTVxsppVKwF1K9zvNvgAPERYiPL8I8f YsbXNotCZThGOmrZwPjnO4JeTOuk5ZdlKvRp/1Rn0CZpak2KKgN2GGB54L2RUDoWCsMP MwXw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:content-type:content-transfer-encoding; bh=di0s6LVH71mm7ZdbnXtBsOJo7WRe0TfuMY90lywH9Ok=; b=jrce655Gqw2JZe3nrq3I+mavobk0yRP0P9VvhLsvqXKcEjnjJm2awcu+bwdChIDpt8 1/Dn4YrfNgWze1KNxkNwtWyyXo1+Q0id5cM9Li0amVGObyxSdhoomrzrpDm29wkhAobr pt11gvgjbxnk+P7q1vanUJ+kGv+e8hI8iSD8kESn5us8xthvbSNh6nn5n+GBkJQy9g6w +svKArc9/ZSFuMeR+qd2iXjD0kuHghkOgELHJyeVgaICm7f6Xc8Dwne7Bg9GcgD1CESG MepGltwQVPaB2j66GHUzseLjjVOMLrJbYwdaZBWo+N9hS3zkX1QloEunaMjxetY1L5R2 vpew== X-Gm-Message-State: ALoCoQmtJxe1SdtTpjcSV1aHztiy+Z1HPhofc3DvcV0rMfVYjg3sY9u+F2/N8+LbGQWTPvkfezS01tV+iidmgXU2OvA4O8uK1l59DTr1cemqzAaqKSO2kTrVmLiBwc6ppsy2KPL1j8r9j6yLhgeLNEHBw/y1JYjlgz9afQWBhoIWP338xj1TdNdELUSrwQ/1chyNG5MRaj5h MIME-Version: 1.0 X-Received: by 10.58.122.164 with SMTP id lt4mr45338784veb.2.1398256262703; Wed, 23 Apr 2014 05:31:02 -0700 (PDT) Received: by 10.52.119.179 with HTTP; Wed, 23 Apr 2014 05:31:02 -0700 (PDT) In-Reply-To: References: Date: Wed, 23 Apr 2014 13:31:02 +0100 Message-ID: From: Ben Laurie To: "therightkey@ietf.org" , CABFPub Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Archived-At: http://mailarchive.ietf.org/arch/msg/therightkey/Kk4eHZn_Bvy_pl8Ci9SqeOOYLvA Subject: [therightkey] Fwd: Last Call: Certificate Transparency - Second Hack Day: May 7th, 2014 X-BeenThere: therightkey@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Apr 2014 12:31:09 -0000 ---------- Forwarded message ---------- From: Eran Messeri Date: 23 April 2014 13:20 Subject: Last Call: Certificate Transparency - Second Hack Day: May 7th, 20= 14 To: certificate-transparency@googlegroups.com, "trans@ietf.org" Gentlefolk, If you intend to attend the second CT hack day, please sign up here by Friday, May 2nd. One of the issues that came up repeatedly recently was logs' infrastructure and using the open-source log implementation in production environments. If that's an interesting topic for you, the hack day would be a very suitable forum to discuss it. Regards, Eran ---------- Forwarded message ---------- From: Eran Messeri Date: Thu, Mar 27, 2014 at 10:55 AM Subject: Re: Certificate Transparency - Second Hack Day: May 7th, 2014 To: certificate-transparency@googlegroups.com, "trans@ietf.org" The Certificate Transparency team at Google invites interested parties to the second CT hack day at Google's London office on Wednesday, May 7th, 2014. The agenda is open, though we have some suggestions: Improving open-source C++ and Python monitors. Draft (I-D) editing for RFC6962-bis. Updates on Chrome support and Google's production logs. Gossip: brainstorming communication channels and implementation. Members of the trans WG are welcome to attend and collaborate (but it's not a trans WG meeting). We'll break into coding/discussion streams, like last time. Register your interest and propose agenda items here (by May 2nd). Eran, on behalf of the Certificate Transparency team at Google On Thu, Mar 27, 2014 at 10:30 AM, Eran Messeri wrote: > > The Certificate Transparency team at Google invites interested parties to= the second CT hack day at Google's London office on Wednesday, May 7th, 20= 14. > The agenda is open, though we have some suggestions:* Improving open-sour= ce C++ and Python monitors.* Draft (I-D) editing for RFC6962-bis.* Updates = on Chrome support and Google's production logs.* Gossip: brainstorming comm= unication channels and implementation.Members of the trans WG are welcome t= o attend and collaborate (but it's not a trans WG meeting).We'll break into= coding/discussion streams, like last time. > Register your interest and propose agenda items here (by May 2nd). If you= can't attend in-person, let us know so we may set up a video conference fo= r remote participants. > Eran, on behalf of the Certificate Transparency team at Google --=20 Certificate Transparency is hiring! Let me know if you're interested. From nobody Thu Apr 24 14:54:52 2014 Return-Path: X-Original-To: therightkey@ietfa.amsl.com Delivered-To: therightkey@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D3BF71A0402 for ; Thu, 24 Apr 2014 14:54:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 2.566 X-Spam-Level: ** X-Spam-Status: No, score=2.566 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, J_CHICKENPOX_36=0.6, J_CHICKENPOX_62=0.6, RCVD_IN_DNSWL_NONE=-0.0001, SPF_SOFTFAIL=0.665] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yB41x46bh3AI for ; Thu, 24 Apr 2014 14:54:49 -0700 (PDT) Received: from homiemail-a37.g.dreamhost.com (homie.mail.dreamhost.com [208.97.132.208]) by ietfa.amsl.com (Postfix) with ESMTP id 840271A03FD for ; Thu, 24 Apr 2014 14:54:49 -0700 (PDT) Received: from homiemail-a37.g.dreamhost.com (localhost [127.0.0.1]) by homiemail-a37.g.dreamhost.com (Postfix) with ESMTP id 81A9420806B for ; Thu, 24 Apr 2014 14:54:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=taoeffect.com; h=from :content-type:subject:message-id:date:mime-version:to; s= taoeffect.com; bh=Wk8SS4aNcWleaEKaMcPms1yXRhA=; b=pQxegN7h062xr+ YtA5V9bRoXV9PgNHYh7/EyVgL9dzICiRKRwLvAX3hv9JMszBOMjYQ8314a+lsIHJ UzrxlTzVM+geYfSJVbGxdFb1JQqZwgrdXoMzy4rKtUXOkt70PxLkOhZ6I+p6Wjv/ 6adjKlg0xGBsELATN9i0OTvhCvZXI= Received: from [192.168.1.6] (173-17-72-87.client.mchsi.com [173.17.72.87]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: contact@taoeffect.com) by homiemail-a37.g.dreamhost.com (Postfix) with ESMTPSA id 60D1C208063 for ; Thu, 24 Apr 2014 14:54:42 -0700 (PDT) From: Tao Effect X-Pgp-Agent: GPGMail 2.1 (525b9ae) Content-Type: multipart/signed; boundary="Apple-Mail=_E4EF1FE1-B8DB-4921-B569-A78A1A31A480"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Mao-Original-Outgoing-Id: 420069279.252649-9ea420ea695a9a7f670141b278a10825 Message-Id: Date: Thu, 24 Apr 2014 16:54:39 -0500 Mime-Version: 1.0 (Mac OS X Mail 7.2 \(1874\)) To: "therightkey@ietf.org" X-Mailer: Apple Mail (2.1874) Archived-At: http://mailarchive.ietf.org/arch/msg/therightkey/nqSQe_a_UU3qxxNoMgrhGstsnB4 Subject: [therightkey] DNSChain 0.1.0 adds DANE/TLSA support for blockchain + canonical DNS X-BeenThere: therightkey@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Apr 2014 21:54:51 -0000 --Apple-Mail=_E4EF1FE1-B8DB-4921-B569-A78A1A31A480 Content-Type: multipart/alternative; boundary="Apple-Mail=_A83DCE67-7C14-4A02-B720-E823FE9543A1" --Apple-Mail=_A83DCE67-7C14-4A02-B720-E823FE9543A1 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi list! Just published this to NPM and thought it might interest some of the = folks here. DNSChain is a DNS + HTTP(S) + Blockchain-proxy hybrid server designed to = serve as a decentralized and distributed secure replacement for = Certificate Authorities and X.509 PKI. It's also designed to act as a secure public key distribution system for = both websites and identity systems. Today, with the help of various contributors, we released version 0.1.0: New Features: DANE/TLSA support for BOTH canonical DNS and blockchain DNS! Added NO_OLD_DNS option for oldDNSMethod (refuses all non-blockchain = queries) Improvements: Redesigned dns.coffee and improved its structure Accurate ttl values now returned for namecoin DNS queries based on = expires_in field Updated contributors, code and config examples in README.md Improved EDNS support Improved handling of ANY queries Updated dependencies to latest versions native-dns is now fetched from the dnschain branch of our fork. Comments added all over the place (to native-dns & related projects = also!) Many other code improvements both to DNSChain and the NodeJS native-dns = module Some performance improvements Fixes: Fixed broken grunt example Fixed some uncaught exceptions (issues #1 and #2) Fixed broken NAPTR support Changes: DNSChain license is now MPL-2.0 (applies to version 0.1.0 onward) Default logging level is now info It's compatible with most UNIX-like systems (including OS X) and can be = installed via the NPM package manager or manually via Git. Free public servers (including ones that support DNSCrypt), along with = instructions for installing and running DNSChain, is available on its = GitHub page: https://github.com/okTurtles/dnschain Cheers, Greg Slepak -- Please do not email me anything that you are not comfortable also = sharing with the NSA. --Apple-Mail=_A83DCE67-7C14-4A02-B720-E823FE9543A1 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii
Hi list!

Just = published this to NPM and thought it might interest some of the folks = here.

DNSChain is a DNS + HTTP(S) + Blockchain-proxy = hybrid server designed to serve as a decentralized and distributed = secure replacement for Certificate Authorities and X.509 = PKI.

It's also designed to act as a secure public key = distribution system for both websites and identity = systems.

Today, with the help of various = contributors, we released version = 0.1.0:

  • New Features:
    • DANE/TLSA support for BOTH canonical DNS and blockchain = DNS!
    • Added NO_OLD_DNS option for oldDNSMethod = (refuses all non-blockchain queries)
  • Improvements:
    • Redesigned dns.coffee and improved its structure
    • Accurate ttl values now returned for namecoin DNS = queries based on expires_in field
    • Updated contributors, code and config examples in = README.md
    • Improved EDNS support
    • Improved handling of ANY queries
    • Updated dependencies to latest versions
    • native-dns is now fetched from the dnschain = branch of our = fork.
    • Comments added all over the place (to native-dns & = related projects also!)
    • Many other code improvements both to DNSChain and the NodeJS = native-dns module
    • Some performance improvements
  • Fixes:
    • Fixed broken grunt example
    • Fixed some uncaught exceptions (issues #1 and #2)
    • Fixed broken NAPTR support
  • Changes:
    • DNSChain license is now MPL-2.0 (applies to version 0.1.0 = onward)
    • Default logging level is now info

It's compatible with most UNIX-like = systems (including OS X) and can be installed via the NPM package = manager or manually via Git.

Free public = servers (including ones that support DNSCrypt), along with instructions = for installing and running DNSChain, is available on its GitHub = page:


Cheers,
Greg = Slepak

--
Please do not email me anything that you are not comfortable also = sharing with the NSA.

= --Apple-Mail=_A83DCE67-7C14-4A02-B720-E823FE9543A1-- --Apple-Mail=_E4EF1FE1-B8DB-4921-B569-A78A1A31A480 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQIcBAEBCgAGBQJTWYgfAAoJEOxnICvpCVJH3AMP/1pg0SS/t3bVH7XeFi/cq409 lPBYU+nWgg2Lsnq2CZbEePccTQ1LZx5dqNIxp1Nya76QK5Dm9C8W2r1L0FjL0FXw F22jqALAxz4DB23ARzs3PhmijeRuHn/ngbfOU5O1S47pSsK9Lql6DtN3V13SIe0O vkXv295RZDrwu7AoXsyVxA+eURAR4snR39ecI+7bb/ulRIEMQW+5vhOyuHpWuqhp Burmc5eKT8UnfKANI4zW4jxVkcdVP6c1/3lQEVmn+5Z6axd+PqkCHSFKYZF/MSQm 5Vrc4++jLZbWu5P7xpugKS4s0joRaZwS8rS3U1f99kBpaTAlZ3jqPBi0U2O3Phs/ CN58/8MMYioCfQQfz20e5SU/z1C9rB4AHuMz6sTxhyQYsjH/p+4l2ED2Nm+WiQux 7JzBUvPLkuD4RytTT6idW5ogvixscsNy8b68U5/O0jclJa+82A/jBplsZEkdS6s1 0AeFfx7BylznZbbEa5Ru7gtdsl6aXNLmPu/j0OFxqi3rcnywnkHHlG2gUxTKXqpL cnBJNMcn6FaRHkvT6e2LDee9t5L8ph54FzHMC24Ew2S7VdLDj3r0epGSA87u9BwS AnR5/lr47oLeu9LjNDstLL0MeXbzfUQQPYFjeuP/WgVM9kiXWlDZhUa6svphKIyC DxuYT3acFPc+RtOVs7O+ =toTK -----END PGP SIGNATURE----- --Apple-Mail=_E4EF1FE1-B8DB-4921-B569-A78A1A31A480--